Multiple PERMITs within the same PROFILE.

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Permits in the same profile and only profile on the user:

Rule#1 --> DSN(ABC) ACCESS(NONE)
Rule#2 --> DSN(ABCD) ACCESS(UPDATE)

If the dataset name is ABCDEF which rule will be used if the requested access level is UPDATE? 

Environment

Release:
Component: TSSMVS

Resolution

The more specific PERMIT will be used. 

In the example you gave, the second PERMIT is more specific. 

Rule#1 --> DSN(ABC) ACCESS(NONE) 
Rule#2 --> DSN(ABCD) ACCESS(UPDATE) 

ABCD is more specific than ABC. 

This is documented in the doc at : 

How the Algorithm Determines Best Fit

in the first bullet.